Privacy Policy
Last updated: 28 October 2026
1. Data Controller
SUBVALÈNCIA (subvalencia.com) operates this website; its owner is listed in the Legal Notice. For all privacy-related enquiries, contact us at hello@subvalencia.com.
2. Data We Collect
Account data (if you register): email address, name (optional), hashed password, OAuth provider identifiers (if you sign in with Google or Facebook), locale preference.
Usage data: the events you save as favourites and the ticket links you click.
Technical data: IP address, browser type, referring URL, session identifier.
We do not collect sensitive personal data (health, financial, or biometric information).
3. How We Use Your Data
- To create and manage your account
- To keep your favourite events
- To improve the selection of events from aggregate usage patterns
- To detect and prevent fraud and abuse
- To comply with legal obligations
4. Legal Basis for Processing (GDPR)
| Processing activity | Legal basis |
|---|---|
| Account creation and management, favourites | Contract performance (Art. 6(1)(b)) |
| Aggregate usage analysis | Legitimate interests (Art. 6(1)(f)) |
| Legal compliance | Legal obligation (Art. 6(1)(c)) |
5. Data Sharing
We do not sell your personal data. We may share data with:
- Hosting and infrastructure providers as necessary to operate the Service
- Email delivery services (Resend) to send transactional emails (account confirmation, password reset)
- Google and Facebook, only if you choose to sign in with them
6. International Transfers
Our services operate within the European Economic Area. If data is transferred outside the EEA, we ensure appropriate safeguards are in place as required by GDPR.
7. Data Retention
- Account data is retained for as long as your account is active
- You may ask us to delete your account at any time by writing to hello@subvalencia.com; this permanently removes your account and associated personal data
8. Your Rights (GDPR)
Under the GDPR you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate data
- Erase your data ("right to be forgotten")
- Restrict or object to processing
- Port your data to another service
- Withdraw consent at any time (this does not affect the lawfulness of prior processing)
To exercise any of these rights, contact us at hello@subvalencia.com. We will respond within 30 days.
9. Cookies
We use cookies as described in our Cookie Policy.
10. Security
We implement appropriate technical and organisational measures to protect your personal data. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "last updated" date at the top of this page. We encourage you to review this policy periodically.
12. Contact & Complaints
For privacy enquiries: hello@subvalencia.com.
If you believe we have not addressed your concerns adequately, you have the right to lodge a complaint with the Spanish data protection authority, the Agencia Española de Protección de Datos (AEPD).